Kalium

52 ms·

541.
by Kalium 5y ago
The tools to administer a home network, such as DNS blocking and DNS sinkholes, are the same tools nations use to administer their populaces. If the default in Firefox is to enable blocking and sinkholes for the home administrator's be
542.
by Kalium 5y ago
I don't blame you. It's often next to impossible to engage constructively with someone who has chosen to believe that you are engaging in bad faith. Doubly so when they start by choosing to ignore potentially relevant facts. For m
543.
by Kalium 5y ago
You are once again completely correct! It definitely sounds an awful lot like MRA whining. It just might be worth considering that what is in one context baseless sexist whining might in another be an accurate observation of the effects o
544.
by Kalium 5y ago
Your point about the horrors of sexism is well-meant, well-taken, and morally correct in every single possible way. Do you think it might be useful information to consider that years of China's one-child policy and strong cultural pref
545.
by Kalium 5y ago
> So why not explicitly ask them to? "So now we have our estimate, what would cause us to miss it?" I didn't used to take this seriously. Then one project I was on was delayed by several weeks when members of the team got
546.
by Kalium 5y ago
On the one hand, I'm also somewhat disappointed. On the other hand, Veracode's central product is a scanner. I cannot even begin to imagine how to consistently evaluate the boring, manual, operational parts of a security program i
547.
by Kalium 5y ago
Oh, you're absolutely right. I simplified immensely by aggregating at the level of a convenient political division that has only vague bearing on actual geography as well as assuming the distributions are uniform across the range in qu
548.
by Kalium 5y ago
At the risk of being overly opinionated, I think that developers do not learn what is good or bad cryptography from writing it. We learn what is good or bad code from writing and maintaining it. People learn what is good or bad cryptography
549.
by Kalium 5y ago
You might be surprised: https://worldpopulationreview.com/state-rankings/tornado-all... EF4 or EF5 tornadoes are around 2% of those in the US ( https://en.wikipedia.org/wiki/Tornadoes_in_the_United_
550.
by Kalium 5y ago
The numbers I'm using include installation costs too. Wood and brick are more labor than vinyl as I understand it. I think my key lesson here is that even building smaller, using "better" materials is an expensive matter of t
551.
by Kalium 5y ago
That's an excellent point! It also provides a handy analytical framework. I'm going to try apply it to siding. The cost differential between brick and vinyl siding can easily be a factor of five, and wood vs vinyl a factor of six
552.
by Kalium 5y ago
It specifically mentions vinyl siding as a cheap option that better-off consumers spend money to avoid in favor of more expensive wood or brick. Extravagance is perhaps, at times, a matter of perspective and opinion. Some might consider con
553.
by Kalium 5y ago
I had a class like that my freshman year of high school - a public school outside a medium-sized town in Michigan. It even included all the kitchen sink stuff people tend to ask for: budgeting, basic nutrition, fitness, physical health, emo
554.
by Kalium 5y ago
> But I am wondering how could we debug or test something which happens only on production? I ask this because there are some bugs that can appear at the intersection of code and data. I've found that your strategy depends greatly o
555.
by Kalium 5y ago
I remember my experience as a candidate on Hired. I pretty consistently got low-grade startup trash (think collectible art trading cards, but digital!) with lowballed comp. If Triplebyte was worse, then it's no wonder they placed so fe
556.
by Kalium 5y ago
It's rarely as easy to walk right in. Plus I imagine it's harder to fence Aeron chairs than cosmetics and detergent. Plus the company will probably actually call the police, file reports, and submit evidence. Walgreens will write
557.
by Kalium 5y ago
> Just because something is not legally tax avoidance does not mean that it should not be. I think this author would agree with you on this point and indeed most of your points. I think it could perhaps worth considering this author&#x27
558.
by Kalium 5y ago
Excellent advice! I read and understood the article as using this the first time. I feel my criticism stands, though again I understand that others may feel differently.
559.
by Kalium 5y ago
I think that would be a great approach. Incomes and asset values are very different and work differently. They benefit from being discussed with different vocabulary in order to make this distinction clear to the general public.
560.
by Kalium 5y ago
You're completely right on both counts. That's precisely what they do. Income is definitely not the whole picture. I don't disagree with anything you've written here. I just think that conflating growth in value of asset
561.
by Kalium 5y ago
> This article does not conflates income and wealth, stop saying that. The article repeatedly uses what it calls a "true tax rate", which is calculated from wealth. It does this knowing that people reason about tax rates as per
562.
by Kalium 5y ago
I've found myself addressing the issue with a section at the top of documentation about the expected reader. I can get quite explicit about what the reader is expected to know, include links to relevant backgrounders, and warn that any
563.
by Kalium 5y ago
I've found that using a risk-based approach to security requires a mature organizational framework for handling risk. A mature risk management process keeps good records of how risks are handled, what the estimated impact and likelihoo
564.
by Kalium 5y ago
> how did we as an industry end up in a place where it's this dang hard to keep systems secure? Shipping is easy. Shipping makes the product better. Shipping gets the customers and the funding and furthers the mission. You do what i
565.
by Kalium 5y ago
On the security engineer item, I think this piece falls into a common trap. It regards security work as mostly technical work, to be handed to an IC who can also handle technical questions. As the company will probably lack a decent securit
566.
by Kalium 5y ago
Not all u2f keys require being touched. That's an optional hardware implementation detail, rather than a mandatory trait across all u2f devices. Yubikey sells keys that are commonly used by plugging them in, leaving them, and never aga
567.
by Kalium 5y ago
You're absolutely right. There's often no shortage of low hanging fruit. I'm not suggesting we should declare anything impossible. Far from it! I'm merely trying to suggest that we should appreciate that not all things a
568.
by Kalium 5y ago
SCADA's a good example of systems that are difficult to secure for complex reasons. There are many others. You ask a very wise question. Unfortunately, I think it's unknownable. The best we know is that the answer is more than non
569.
by Kalium 5y ago
Sometimes simple preventative measures aren't as simple as they might sound. How would you go about integrating yubikeys for login into multi-decade-old SCADA hardware systems? I'm a security specialist and I honestly wouldn'
570.
by Kalium 5y ago
Something about security in particular brings out the puritanical streak many engineers have.

More ›